Add a return value to tls_crypto_t.derive_secrets()